@xmoon76/dsh-pi-tui 0.2.2 → 0.3.0

package/README.md

@@ -30,7 +30,9 @@ output.
 
 ## Prerequisites
 
-- A DeepSeek Harness installation with profiles support (`dsh` on your `PATH`).
+- A DeepSeek Harness installation with profiles support (`dsh` on your `PATH`),
+  version `0.1.1-rc.1` or later on the same compat line (the TUI consumes the
+  split credential events and the `ctx.authorization` seam of that release).
 - Node >= 22.19 (`^22.19.0 || >=24`, same range as dsh). Running from source
   needs Node with native TypeScript support (>= 23.6) or the tsx ESM hook
   (`node --import tsx/esm`, how dsh's own source launch works).

package/README.zh-CN.md

@@ -28,7 +28,9 @@
 
 ## 前置要求
 
-- 一个支持 profile 的 DeepSeek Harness 安装(`dsh` 已在 `PATH` 中)。
+- 一个支持 profile 的 DeepSeek Harness 安装(`dsh` 已在 `PATH` 中),版本
+  `0.1.1-rc.1` 或同一兼容线上的更新版本——TUI 消费该版本的拆分凭据事件
+  与 `ctx.authorization` 服务。
 - Node >= 22.19(`^22.19.0 || >=24`,与 dsh 相同范围)。从源码运行需要
   原生支持 TypeScript 的 Node(>= 23.6)或 tsx ESM 钩子
   (`node --import tsx/esm`,dsh 自身源码启动的方式)。

package/cordis.patch.yml

@@ -26,10 +26,22 @@
 
     - id: tui-app
       name: '@xmoon76/dsh-pi-tui'
-      inject: [tuiStartup, piTuiExtensions]
+      inject: [tuiStartup, piTuiExtensions, authorization]
       config:
         sessionId: ''
 
+    # The authorization seam (`ctx.authorization`): plugin-owned credential-
+    # obtaining flows, one attempt per key, transport-neutral notices and
+    # prompts. The dsh host does NOT mount it anywhere (the base layer ships
+    # only `credentials` + `llm-pi-ai`), so the TUI profile inserts the row
+    # itself — the TUI is the interactive surface that can answer its
+    # prompts. `AuthorizationService` injects `credentials`, so this row
+    # activates only after the base's credentials row; llm-pi-ai's
+    # provider login flows register once both services are up (it injects
+    # `authorization` optionally and degrades without it).
+    - id: authorization
+      name: '@deepseek-ai/dsh-authorization'
+
     # The agent-preset roster. The SHIPPED root is an assembly fact of this
     # bundle: the four presets (standard/code/minimal/cordis) travel with the
     # package under config/agent-presets and carry `system` trust. The

package/dist/builtins.mjs

@@ -1,5 +1,5 @@
 import { TUI_STARTUP_SERVICE } from "./startup.mjs";
-import { N as PI_TUI_EXTENSIONS_SERVICE } from "./src-BsSlpFFF.mjs";
+import { A as dshVersion, F as PI_TUI_EXTENSIONS_SERVICE } from "./src-ClAKiW0z.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 //#region src/builtins.ts
@@ -27,12 +27,13 @@ function apply(ctx) {
 	if (ctx.get("tuiStartup") === void 0) return;
 	const service = ctx.get(PI_TUI_EXTENSIONS_SERVICE);
 	if (service === void 0) return;
+	const installedDsh = dshVersion();
 	service.register("chrome.header.badge", {
 		id: "builtin-version",
 		order: 1e3,
-		description: "The bundle version (first-party builtin)."
+		description: "The dsh and bundle versions (first-party builtin)."
 	}, {
-		text: `v${packageVersion()}`,
+		text: installedDsh === void 0 ? `tui-v${packageVersion()}` : `dsh-${installedDsh} · tui-v${packageVersion()}`,
 		tone: "info"
 	});
 	const counters = service.register("chrome.footer.status", {

package/dist/extensions.mjs

@@ -1,3 +1,3 @@
 import "./startup.mjs";
-import { A as apply, F as describeKey, M as name, N as PI_TUI_EXTENSIONS_SERVICE, P as API_VERSION, j as inject } from "./src-BsSlpFFF.mjs";
+import { F as PI_TUI_EXTENSIONS_SERVICE, I as API_VERSION, L as describeKey, M as apply, N as inject, P as name } from "./src-ClAKiW0z.mjs";
 export { API_VERSION, PI_TUI_EXTENSIONS_SERVICE, apply, describeKey, inject, name };

package/dist/index.d.mts

@@ -125,6 +125,16 @@ interface Config {
   sessionId?: string;
 }
 declare const Config: z<Config>;
+/**
+ * Wire the credential surface refresh to the dsh 0.1.1-rc.1 credential
+ * events. The rc.1 release split the credential update event into the
+ * reference half and the durable-record half; both change what the footer
+ * model row and the welcome card show (a /login /logout, an external
+ * .credentials.yaml edit, or an authorization flow committing a record), so
+ * they share one best-effort callback. The callback must not read secrets
+ * or mutate providers — it only re-reads describe-level state.
+ */
+declare function registerCredentialSurfaceRefresh(ctx: Context, refresh: () => void): void;
 /**
  * Slash commands that need no session: before the first user message
  * (deferred start) they run locally without creating one. Everything else
@@ -498,4 +508,4 @@ declare function recomposeBlank(ctx: Context, agent: {
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { AgentComposition, CompactionFold, Config, HOST_COMMAND_CATALOG, InitialCatalogResolution, LOCAL_COMMANDS, PendingSubagentCall, QueueFoldResult, QueueInboxMessage, QueueNoticeSource, RecomposableSession, RecomposeOutcome, ResolveInitialCatalogOptions, SESSIONLESS_COMMANDS, SessionLockRefusedError, apply, busyAfterTurnBoundary, compactingFromLog, composeAgent, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, recomposeBlank, recordedPreset, resolveInitialCatalog, resumeCommand, runningProfile, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure };
+export { AgentComposition, CompactionFold, Config, HOST_COMMAND_CATALOG, InitialCatalogResolution, LOCAL_COMMANDS, PendingSubagentCall, QueueFoldResult, QueueInboxMessage, QueueNoticeSource, RecomposableSession, RecomposeOutcome, ResolveInitialCatalogOptions, SESSIONLESS_COMMANDS, SessionLockRefusedError, apply, busyAfterTurnBoundary, compactingFromLog, composeAgent, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, recomposeBlank, recordedPreset, registerCredentialSurfaceRefresh, resolveInitialCatalog, resumeCommand, runningProfile, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure };

package/dist/index.mjs

@@ -1,3 +1,3 @@
 import "./startup.mjs";
-import { C as runningProfile, D as subagentJobViewHint, E as subagentJobTranscriptId, O as subagentNoticeIsFailure, S as resumeCommand, T as shouldSteerOnEnter, _ as matchPendingSubagentCall, a as SessionLockRefusedError, b as recordedPreset, c as compactingFromLog, d as foldCompactionEvent, f as foldQueueRows, g as isUserQueueInput, h as isSubagentSettlementNotice, i as SESSIONLESS_COMMANDS, k as forkSeed, l as composeAgent, m as isPlainExitPrompt, n as HOST_COMMAND_CATALOG, o as apply, p as inject, r as LOCAL_COMMANDS, s as busyAfterTurnBoundary, t as Config, u as dangerCommand, v as name, w as shouldConsumeAdvertisedMiss, x as resolveInitialCatalog, y as recomposeBlank } from "./src-BsSlpFFF.mjs";
-export { Config, HOST_COMMAND_CATALOG, LOCAL_COMMANDS, SESSIONLESS_COMMANDS, SessionLockRefusedError, apply, busyAfterTurnBoundary, compactingFromLog, composeAgent, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, recomposeBlank, recordedPreset, resolveInitialCatalog, resumeCommand, runningProfile, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure };
+import { C as resumeCommand, D as subagentJobTranscriptId, E as shouldSteerOnEnter, O as subagentJobViewHint, S as resolveInitialCatalog, T as shouldConsumeAdvertisedMiss, _ as matchPendingSubagentCall, a as SessionLockRefusedError, b as recordedPreset, c as compactingFromLog, d as foldCompactionEvent, f as foldQueueRows, g as isUserQueueInput, h as isSubagentSettlementNotice, i as SESSIONLESS_COMMANDS, j as forkSeed, k as subagentNoticeIsFailure, l as composeAgent, m as isPlainExitPrompt, n as HOST_COMMAND_CATALOG, o as apply, p as inject, r as LOCAL_COMMANDS, s as busyAfterTurnBoundary, t as Config, u as dangerCommand, v as name, w as runningProfile, x as registerCredentialSurfaceRefresh, y as recomposeBlank } from "./src-ClAKiW0z.mjs";
+export { Config, HOST_COMMAND_CATALOG, LOCAL_COMMANDS, SESSIONLESS_COMMANDS, SessionLockRefusedError, apply, busyAfterTurnBoundary, compactingFromLog, composeAgent, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, recomposeBlank, recordedPreset, registerCredentialSurfaceRefresh, resolveInitialCatalog, resumeCommand, runningProfile, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure };

package/dist/{src-BsSlpFFF.mjs → src-ClAKiW0z.mjs}

@@ -31,6 +31,8 @@ import { fileURLToPath } from "node:url";
 import { EventEmitter } from "events";
 import { Service } from "@deepseek-ai/cordis";
 import { isUserInvocable, renderSkillContent } from "@deepseek-ai/dsh-skill";
+import { AuthorizationDeclinedError } from "@deepseek-ai/dsh-authorization";
+import { credentialKeyId, credentialKeyScope } from "@deepseek-ai/dsh-credentials";
 //#region src/present.ts
 /** Figma row titles per variant (design literals, not translatable copy). */
 const VARIANT_TITLES = {
@@ -14014,6 +14016,11 @@ var QuestionFlow = class {
 			if (row.key === OTHER_ROW && this.editingOther) {
 				const inputLine = this.otherInput.render(Math.max(1, width - visibleWidth(prefix)))[0] ?? "";
 				const stripped = inputLine.startsWith("> ") ? inputLine.slice(2) : inputLine;
+				if (question.masked === true && this.otherInput.getValue() !== "") {
+					lines.push(prefix + color.textDim("•".repeat(this.otherInput.getValue().length)));
+					hits.push(OTHER_ROW);
+					continue;
+				}
 				lines.push(prefix + (this.otherInput.getValue() === "" ? color.textDim(row.label) : stripped));
 				hits.push(OTHER_ROW);
 				continue;
@@ -14326,7 +14333,7 @@ var QuestionFlow = class {
 				const question = this.questions[qi];
 				const draft = this.drafts[qi];
 				if (question === void 0 || draft === void 0) continue;
-				const value = draft.skipped ? "(skipped)" : draft.custom !== "" && question.multiSelect !== true ? draft.custom : [...draft.selected].join(", ") + (draft.custom !== "" ? ` + ${draft.custom}` : "");
+				const value = draft.skipped ? "(skipped)" : draft.custom !== "" && question.multiSelect !== true ? question.masked === true ? "•".repeat(draft.custom.length) : draft.custom : [...draft.selected].join(", ") + (draft.custom !== "" ? ` + ${draft.custom}` : "");
 				reviewBudget = appendWrappedBudgeted(lines, `${color.textDim(`Q${qi + 1}`)}  `, "       ", question.question, safeWidth, reviewBudget);
 				if (reviewBudget > 0) reviewBudget = appendWrappedBudgeted(lines, "  ", "    ", value === "" ? color.textDim("(no answer)") : value, safeWidth, reviewBudget);
 			}
@@ -14387,7 +14394,8 @@ var QuestionFlow = class {
 		if (optionless) {
 			const inputLine = this.otherInput.render(Math.max(1, safeWidth - 2))[0] ?? "";
 			const stripped = inputLine.startsWith("> ") ? inputLine.slice(2) : inputLine;
-			lines.push(this.otherInput.getValue() === "" ? color.textDim(" Type your answer…") : ` ${stripped}`);
+			if (question.masked === true && this.otherInput.getValue() !== "") lines.push(` ${color.textDim("•".repeat(this.otherInput.getValue().length))}`);
+			else lines.push(this.otherInput.getValue() === "" ? color.textDim(" Type your answer…") : ` ${stripped}`);
 		}
 		if (draft.skipped) lines.push(color.textDim("(skipped)"));
 		lines.push("");
@@ -14513,8 +14521,15 @@ function parseShellWords(line) {
 *   the user's own draft.
 * @module @xmoon76/dsh-pi-tui/shell-completion
 */
-/** Hard cap on one compgen spawn (ms). */
-const COMPGEN_TIMEOUT_MS = 300;
+/**
+* Hard cap on one compgen spawn (ms). GitHub Actions runners are markedly
+* slower at a `bash -lc` cold start (measured 260-310ms in CI vs ~60ms
+* locally — a login shell sources /etc/profile, which is heavy on the
+* runner image), so a single tight cap made the suite flaky there (three
+* CI failures, every one at the 300ms boundary). The cap is therefore
+* raised under GitHub Actions only; local runs keep the tight cap.
+*/
+const COMPGEN_TIMEOUT_MS = process.env.GITHUB_ACTIONS === "true" ? 1500 : 300;
 /** Command-name cache TTL (ms): command sets change rarely. */
 const COMMAND_CACHE_TTL_MS = 3e4;
 /** Suggestion cap per request (the fork's own lists are capped too). */
@@ -21575,7 +21590,8 @@ var TuiApp = class TuiApp {
 					...question.detail !== void 0 ? { detail: question.detail } : {},
 					...question.options !== void 0 ? { options: question.options } : {},
 					...question.multiSelect !== void 0 ? { multiSelect: question.multiSelect } : {},
-					...question.intent !== void 0 ? { intent: question.intent } : {}
+					...question.intent !== void 0 ? { intent: question.intent } : {},
+					...question.masked !== void 0 ? { masked: question.masked } : {}
 				})), (answers) => this.settleQuestions(state, answers), () => this.settleQuestions(state, void 0)),
 				suspendedOverlays: /* @__PURE__ */ new Set(),
 				resolve,
@@ -25175,6 +25191,7 @@ function providerOptionsFor(entries, readSection) {
 		route: "deepseek-official",
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "",
 		settingsPath: []
@@ -25186,13 +25203,15 @@ function providerOptionsFor(entries, readSection) {
 		const profile = entry.settingsPath.length === 0 ? section : getPath(section, entry.settingsPath);
 		const configured = profile !== void 0;
 		const namedRef = configured && typeof profile === "object" && profile !== null && typeof profile.apiKeyEnv === "string" ? profile.apiKeyEnv : void 0;
-		const ref = namedRef !== void 0 && namedRef !== "" ? namedRef : deriveKeyRef(entry.provider);
+		const namesCredential = namedRef !== void 0 && namedRef !== "";
+		const ref = namesCredential ? namedRef : deriveKeyRef(entry.provider);
 		push({
 			label: entry.displayName,
 			ref,
 			route: entry.provider,
 			configured,
 			declared: entry.declared === true,
+			namesCredential,
 			group: configured ? "configured" : entry.declared === true ? "custom" : "available",
 			settingsNs: entry.settingsNs,
 			settingsPath: [...entry.settingsPath]
@@ -25237,6 +25256,184 @@ function resolveCredentialArg(arg, options) {
 	if (route !== void 0) return route.ref;
 	if (/^[a-zA-Z][a-zA-Z0-9_]*$/.test(trimmed)) return trimmed.toUpperCase();
 }
+/** Map the seam's entries to /login targets, deriving the route from the
+*  key's scope (llm-pi-ai flows address the provider route). */
+function authorizationTargets(entries) {
+	return entries.map((entry) => ({
+		kind: "authorization",
+		route: credentialKeyScope(entry.key) === "llm-pi-ai" ? credentialKeyId(entry.key) : void 0,
+		key: entry.key,
+		label: entry.label,
+		methods: entry.methods,
+		inFlight: entry.inFlight
+	}));
+}
+/** The flow target for a provider route, when one is registered. */
+function flowForRoute(targets, route) {
+	return targets.find((target) => target.route === route);
+}
+/**
+* Merge the reference targets and the authorization flows into the /login
+* picker set, applying the rc.1 dedup rule per route:
+*
+* - explicit `apiKeyEnv` profile → the reference target wins (the flow is
+*   NOT offered as a second default entry for the same route — requests
+*   resolve the reference first and a "successful" flow login would leave
+*   the reference unset, failing the next request);
+* - keyless route with a flow → the authorization target wins (no derived
+*   `<ROUTE>_API_KEY` entry is offered as a default);
+* - keyless route without a flow → the derived reference fallback.
+*
+* Flows whose key maps no option route (foreign scopes, or catalog routes
+* the llm directory does not expose) are appended as standalone targets.
+*/
+function mergeLoginTargets(options, targets) {
+	const flowByRoute = /* @__PURE__ */ new Map();
+	const standalone = [];
+	for (const target of targets) if (target.route !== void 0) flowByRoute.set(target.route, target);
+	else standalone.push(target);
+	const merged = [];
+	const covered = /* @__PURE__ */ new Set();
+	for (const option of options) {
+		const flow = flowByRoute.get(option.route);
+		merged.push(option.namesCredential || flow === void 0 ? {
+			kind: "reference",
+			route: option.route,
+			label: option.label,
+			ref: option.ref,
+			configured: option.configured,
+			declared: option.declared,
+			namesCredential: option.namesCredential
+		} : flow);
+		covered.add(option.route);
+	}
+	for (const target of targets) if (target.route === void 0 || !covered.has(target.route)) merged.push(target);
+	return merged;
+}
+/**
+* The one user-facing notice body: the message first, then the page to open
+* and the code to enter, each on its own line. Never truncated — the
+* output panel wraps, so the URL stays copyable. Notices never carry
+* secrets.
+*/
+function formatAuthorizationNotice(notice) {
+	const lines = [notice.message];
+	if (notice.url !== void 0 && notice.url !== "") lines.push("", "Open this page to continue:", notice.url);
+	if (notice.code !== void 0 && notice.code !== "") lines.push("", `Code: ${notice.code}`);
+	return lines.join("\n");
+}
+/**
+* Build the interaction half of one authorization attempt. One instance per
+* attempt: the notice panel is reused across progress notices, and
+* `close()` hides it when the attempt settles (the caller's finally).
+*
+* Prompt mapping:
+* - `text` and `secret` go through the question flow's free-text row;
+*   `secret` is rendered masked (the real value never leaves the input's
+*   memory and is never logged, put in history, or shown anywhere else);
+* - `select` goes through the picker and returns the chosen option's `id`,
+*   never its label;
+* - the user closing the question is a decline → `AuthorizationDeclinedError`;
+* - the prompt's OWN signal withdrawing it is NOT a decline: the rejection
+*   is passed through as-is so the flow can tell a refusal from a race.
+*/
+function createAuthorizationInteraction(app) {
+	let noticeHandle;
+	let noticeBody = "";
+	const showNotice = (notice) => {
+		noticeBody = formatAuthorizationNotice(notice);
+		if (noticeHandle === void 0) noticeHandle = app.openOutputViewer({
+			title: "Sign in",
+			initial: noticeBody,
+			refresh: () => noticeBody,
+			onClose: () => {
+				noticeHandle = void 0;
+			}
+		});
+	};
+	const close = () => {
+		noticeHandle?.();
+		noticeHandle = void 0;
+	};
+	return {
+		interaction: {
+			notify: (notice) => {
+				showNotice(notice);
+			},
+			prompt: async (prompt) => {
+				if (prompt.kind === "select") {
+					const signal = prompt.signal;
+					return await new Promise((resolve, reject) => {
+						if (signal?.aborted === true) {
+							reject(cancellationError("authorization prompt withdrawn"));
+							return;
+						}
+						let settled = false;
+						let handle;
+						const cleanup = () => {
+							if (signal !== void 0) signal.removeEventListener("abort", onAbort);
+						};
+						const onAbort = () => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							handle?.close?.();
+							reject(cancellationError("authorization prompt withdrawn"));
+						};
+						if (signal !== void 0) signal.addEventListener("abort", onAbort, { once: true });
+						handle = app.openPicker(prompt.options.map((option) => ({
+							value: option.id,
+							label: option.label,
+							...option.description !== void 0 && option.description !== "" ? { description: option.description } : {}
+						})), (value) => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							resolve(value);
+						}, () => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							reject(new AuthorizationDeclinedError());
+						}, {
+							header: prompt.message,
+							enableSearch: true
+						});
+						if (settled) handle?.close?.();
+					});
+				}
+				try {
+					const text = (await app.askQuestions([{
+						id: "answer",
+						question: prompt.message,
+						...prompt.placeholder !== void 0 && prompt.placeholder !== "" ? { placeholder: prompt.placeholder } : {},
+						...prompt.kind === "secret" ? { masked: true } : {}
+					}], prompt.signal))[0]?.custom ?? "";
+					if (text === "") throw new AuthorizationDeclinedError();
+					return text;
+				} catch (error) {
+					if (prompt.signal?.aborted === true) throw error;
+					throw new AuthorizationDeclinedError();
+				}
+			}
+		},
+		close
+	};
+}
+/** The user-facing text for one authorization attempt failure, mapping the
+*  seam's stable error taxonomy to copy (plan §15). `unknownErrorText` is
+*  the safe fallback for provider/network errors (already passed through
+*  safeErrorMessage by the caller). */
+function authorizationFailureText(error, unknownErrorText) {
+	switch (error?.code) {
+		case "NO_FLOW": return "login method is no longer available";
+		case "UNKNOWN_METHOD": return "selected login method is no longer available";
+		case "ALREADY_IN_FLIGHT": return "sign-in already in progress";
+		case "NOT_COMMITTED": return "sign-in finished without storing a credential";
+		case "DECLINED": return "login cancelled";
+		default: return `sign-in failed: ${unknownErrorText}`;
+	}
+}
 //#endregion
 //#region src/skill-catalog.ts
 /**
@@ -25579,6 +25776,9 @@ function presetDisplayText(preset) {
 }
 /** The sentinel picker value for the "add a brand-new provider" action row. */
 const ADD_PROVIDER_VALUE = "\0add-provider";
+/** The sentinel prefix for an authorization-target picker row (a credential
+* key can never start with NUL, so route values cannot collide). */
+const AUTH_VALUE_PREFIX = "\0auth:";
 /**
 * M11: the /status extension-health rows (plan §16 — /status extension
 * health). Reads the extension registries' live snapshots: contribution
@@ -25670,6 +25870,7 @@ function readProviderOptions(ctx) {
 		route: "deepseek-official",
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "",
 		settingsPath: []
@@ -25678,26 +25879,36 @@ function readProviderOptions(ctx) {
 		route: option.label,
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "llm-pi-ai",
 		settingsPath: ["providers", option.label]
 	});
 }
-/** Build the picker rows from the merged options: grouped by configured /
-* available / custom via the SelectList group extension (the fork renders a
-* non-interactive header row per group automatically), with the Add New
-* Platform action row pinned last. */
-function providerPickerRows(options) {
+/** Build the merged /login picker rows: reference targets keep their
+* configured/available/custom groups (the fork renders a non-interactive
+* header row per group), authorization targets get their own group, and the
+* Add New Platform action row is pinned last. Authorization row values
+* carry the AUTH_VALUE_PREFIX so they can never collide with a route. */
+function mergedPickerRows(merged) {
 	const rows = [];
 	const groupLabels = {
 		configured: "configured",
 		available: "available · catalog",
-		custom: "custom"
+		custom: "custom",
+		authorization: "sign in with provider"
 	};
-	for (const option of options) rows.push({
-		value: option.route,
-		label: `${option.label} (${option.ref})`,
-		group: groupLabels[option.group]
+	for (const target of merged) if (target.kind === "reference") {
+		const group = target.configured ? "configured" : target.declared ? "custom" : "available";
+		rows.push({
+			value: target.route,
+			label: `${target.label} (${target.ref})`,
+			group: groupLabels[group]
+		});
+	} else rows.push({
+		value: AUTH_VALUE_PREFIX + target.key,
+		label: target.inFlight ? `${target.label} — sign-in in progress` : `${target.label} — sign in`,
+		group: groupLabels.authorization
 	});
 	rows.push({
 		value: ADD_PROVIDER_VALUE,
@@ -25705,6 +25916,161 @@ function providerPickerRows(options) {
 	});
 	return rows;
 }
+/** Recover an authorization target from a picked row value (the marker
+* prefix guarantees no collision with reference route values). */
+function targetFromPickerValue(merged, value) {
+	if (!value.startsWith(AUTH_VALUE_PREFIX)) return void 0;
+	const key = value.slice(6);
+	for (const target of merged) if (target.kind === "authorization" && target.key === key) return target;
+}
+/** One-line summary of every merged target, for the unknown-target error. */
+function mergedTargetsSummary(merged) {
+	return merged.map((target) => target.kind === "reference" ? `${target.label} (${target.ref})` : `${target.label} (provider sign-in)`).join(", ");
+}
+/**
+* Run one authorization attempt on the seam and report it. Method picking
+* (single method → direct; multiple → a picker), notice rendering and
+* prompts all live behind the interaction built here; the seam's stable
+* error taxonomy maps to user-facing copy (§15). On success, a catalog
+* route that is not configured yet gets a minimal keyless profile so the
+* runtime keeps reading the credential record (§12.1 — never an apiKeyEnv,
+* which would switch the request path back to a reference that is not set).
+*/
+async function runAuthorizationLogin(ctx, app, runner, target, options) {
+	const authorization = ctx.get("authorization");
+	if (authorization === void 0) return {
+		kind: "error",
+		text: "authorization service unavailable"
+	};
+	if (target.inFlight) return {
+		kind: "error",
+		text: `sign-in already in progress for ${target.label}`
+	};
+	let method = target.methods[0]?.id;
+	if (method === void 0) return {
+		kind: "error",
+		text: `no sign-in method available for ${target.label}`
+	};
+	if (target.methods.length > 1) {
+		const picked = await new Promise((resolve) => {
+			app.openPicker(target.methods.map((candidate) => ({
+				value: candidate.id,
+				label: candidate.label
+			})), (value) => resolve(value), () => resolve(void 0), {
+				header: `Sign in method · ${target.label}`,
+				enableSearch: false
+			});
+		});
+		if (picked === void 0) return {
+			kind: "error",
+			text: "login cancelled"
+		};
+		method = picked;
+	}
+	const { interaction, close } = createAuthorizationInteraction(app);
+	let outcome;
+	try {
+		outcome = await authorization.begin({
+			key: target.key,
+			method,
+			interaction,
+			signal: runner.signal
+		});
+	} catch (error) {
+		if (runner.signal.aborted) return {
+			kind: "error",
+			text: "login cancelled"
+		};
+		if (error?.code === "NOT_COMMITTED") runner.diag.error("authorization", {
+			key: target.key,
+			error: safeErrorMessage(error)
+		});
+		return {
+			kind: "error",
+			text: authorizationFailureText(error, safeErrorMessage(error))
+		};
+	} finally {
+		close();
+	}
+	if (outcome.status === "cancelled") return {
+		kind: "error",
+		text: "login cancelled"
+	};
+	const profileNote = await provisionKeylessProfile(ctx, runner, target, options);
+	return {
+		kind: "success",
+		text: `signed in to ${target.label}${profileNote}`
+	};
+}
+/**
+* After a successful authorization, write a MINIMAL keyless profile for a
+* catalog route that is not configured yet (§12.1). The record alone does
+* not make the route selectable — llm-pi-ai registers a route only when
+* its settings section names it — and the profile must NOT carry
+* apiKeyEnv, or the request path would switch back to a reference that was
+* never set. Hand-declared/custom routes are left to the add wizard
+* (§12.2). Any failure degrades silently (the sign-in itself succeeded).
+* @returns a user-facing note, or '' when nothing was provisioned.
+*/
+async function provisionKeylessProfile(ctx, runner, target, options) {
+	if (target.route === void 0) return "";
+	const option = options.find((candidate) => candidate.route === target.route);
+	if (option === void 0 || option.configured || option.declared || option.settingsNs === "") return "";
+	const settings = ctx.get("settings");
+	if (settings === void 0) return "";
+	try {
+		await settings.mutate(option.settingsNs, [{
+			op: "set",
+			path: [...option.settingsPath],
+			value: {}
+		}]);
+		return " — provider profile recorded";
+	} catch (error) {
+		runner.diag.warn("authorization", {
+			key: target.key,
+			note: "profile write failed",
+			error: safeErrorMessage(error)
+		});
+		return "";
+	}
+}
+/** Value prefixes for the /logout picker rows (no collision with a ref). */
+const LOGOUT_REF_VALUE = "\0ref:";
+const LOGOUT_RECORD_VALUE = "\0record:";
+/** Build the /logout picker rows: every stored credential record plus every
+* configured reference (presence only — a secret's value never leaves the
+* credentials service). Records are deduplicated by key and labelled with
+* the authorization flow's user-facing name when one owns the key (a
+* record row must say what signing out actually clears). */
+async function logoutPickerRows(credentials, options, targets) {
+	const rows = [];
+	const seenRefs = /* @__PURE__ */ new Set();
+	for (const option of options) {
+		if (seenRefs.has(option.ref)) continue;
+		seenRefs.add(option.ref);
+		try {
+			if ((await credentials.describe(option.ref)).configured) rows.push({
+				value: LOGOUT_REF_VALUE + option.ref,
+				label: `${option.label} (${option.ref})`,
+				group: "API keys"
+			});
+		} catch {}
+	}
+	const records = await credentials.listRecords();
+	const seenKeys = /* @__PURE__ */ new Set();
+	for (const record of records) {
+		if (seenKeys.has(record.key)) continue;
+		seenKeys.add(record.key);
+		const owner = targets.find((target) => target.key === record.key);
+		const label = owner !== void 0 ? `${owner.label} — stored credential${record.kind === void 0 ? "" : ` (${record.kind})`}` : `${record.key}${record.kind === void 0 ? "" : ` (${record.kind})`}`;
+		rows.push({
+			value: LOGOUT_RECORD_VALUE + record.key,
+			label,
+			group: "stored credentials"
+		});
+	}
+	return rows;
+}
 /** Run the add-provider wizard: collect route/api/baseURL/displayName/key
 * through question flows, probe the endpoint for its models (falling back to
 * hand entry), review, then persist the profile + credential.
@@ -27126,7 +27492,7 @@ function registerTuiCommands(runner, initial) {
 	});
 	commands.register({
 		name: "login",
-		description: "Set an API key — deepseek official or an llm-pi-ai provider route",
+		description: "Sign in — deepseek official or an llm-pi-ai provider route (API key or provider-native flow)",
 		input: { hint: "[<route|env-var>]" },
 		handler: async (invocation) => {
 			const credentials = ctx.get("credentials");
@@ -27134,39 +27500,51 @@ function registerTuiCommands(runner, initial) {
 				kind: "error",
 				text: "credentials service unavailable"
 			};
+			const authorization = ctx.get("authorization");
 			const options = readProviderOptions(ctx);
+			const targets = authorizationTargets(authorization?.list() ?? []);
+			const merged = mergeLoginTargets(options, targets);
 			const arg = invocation.rawInput.trim();
 			let route;
 			let ref;
+			let target;
 			if (arg !== "") {
 				const known = resolveCredentialArg(arg, options);
 				if (known !== void 0) {
 					const option = options.find((candidate) => candidate.ref === known);
 					if (option !== void 0) {
-						route = option.route;
-						ref = option.ref;
+						const flow = option.route !== "deepseek-official" ? flowForRoute(targets, option.route) : void 0;
+						if (flow !== void 0 && option.namesCredential === false) target = flow;
+						else {
+							route = option.route;
+							ref = option.ref;
+						}
 					} else ref = known;
 				} else if (ROUTE_PATTERN.test(arg)) {
-					const outcome = await askAddProvider(ctx, app, runner.signal, arg);
-					if (outcome.kind === "cancelled") return {
-						kind: "error",
-						text: "add provider cancelled"
-					};
-					if (outcome.kind === "error") return {
-						kind: "error",
-						text: outcome.text
-					};
-					return {
-						kind: "success",
-						text: outcome.text
-					};
+					const flow = flowForRoute(targets, arg);
+					if (flow !== void 0) target = flow;
+					else {
+						const outcome = await askAddProvider(ctx, app, runner.signal, arg);
+						if (outcome.kind === "cancelled") return {
+							kind: "error",
+							text: "add provider cancelled"
+						};
+						if (outcome.kind === "error") return {
+							kind: "error",
+							text: outcome.text
+						};
+						return {
+							kind: "success",
+							text: outcome.text
+						};
+					}
 				} else return {
 					kind: "error",
-					text: `unknown credential target "${arg}" — ${options.map((option) => `${option.label} (${option.ref})`).join(", ")}`
+					text: `unknown credential target "${arg}" — ${mergedTargetsSummary(merged)}`
 				};
-			} else if (options.length > 1) {
+			} else if (merged.length > 1) {
 				const picked = await new Promise((resolve) => {
-					app.openPicker(providerPickerRows(options), (value) => resolve(value), () => resolve(void 0), {
+					app.openPicker(mergedPickerRows(merged), (value) => resolve(value), () => resolve(void 0), {
 						enableSearch: true,
 						header: "login · providers",
 						noMatchText: "  no matching providers",
@@ -27194,8 +27572,22 @@ function registerTuiCommands(runner, initial) {
 						text: outcome.text
 					};
 				}
-				route = picked;
-			} else route = options[0]?.route;
+				const authTarget = targetFromPickerValue(merged, picked);
+				if (authTarget !== void 0) target = authTarget;
+				else route = picked;
+			} else {
+				const only = merged[0];
+				if (only === void 0) return {
+					kind: "error",
+					text: "no credential targets available"
+				};
+				if (only.kind === "authorization") target = only;
+				else {
+					route = only.route;
+					ref = only.ref;
+				}
+			}
+			if (target !== void 0) return runAuthorizationLogin(ctx, app, runner, target, options);
 			if (route === void 0 && ref === void 0) return {
 				kind: "error",
 				text: "no credential targets available"
@@ -27206,7 +27598,8 @@ function registerTuiCommands(runner, initial) {
 			try {
 				const key = (await app.askQuestions([{
 					id: "key",
-					question: `Paste the API key for ${label}:`
+					question: `Paste the API key for ${label}:`,
+					masked: true
 				}]))[0]?.custom ?? "";
 				if (key === "") return {
 					kind: "error",
@@ -27227,7 +27620,7 @@ function registerTuiCommands(runner, initial) {
 	});
 	commands.register({
 		name: "logout",
-		description: "Clear a stored API key — deepseek official or an llm-pi-ai provider route",
+		description: "Clear a stored credential — deepseek official or an llm-pi-ai provider route (API key or stored record)",
 		input: { hint: "[<route|env-var>]" },
 		handler: async (invocation) => {
 			const credentials = ctx.get("credentials");
@@ -27235,24 +27628,72 @@ function registerTuiCommands(runner, initial) {
 				kind: "error",
 				text: "credentials service unavailable"
 			};
+			const authorization = ctx.get("authorization");
 			const options = readProviderOptions(ctx);
+			const targets = authorizationTargets(authorization?.list() ?? []);
 			const arg = invocation.rawInput.trim();
 			if (arg !== "") {
 				const resolved = resolveCredentialArg(arg, options);
-				if (resolved === void 0) return {
+				if (resolved !== void 0) {
+					const option = options.find((candidate) => candidate.ref === resolved);
+					const flow = option !== void 0 && option.route !== "deepseek-official" && !option.namesCredential ? flowForRoute(targets, option.route) : void 0;
+					if (flow !== void 0) {
+						await credentials.deleteRecord(flow.key);
+						return {
+							kind: "success",
+							text: `${flow.label} signed out locally — stored credential cleared`
+						};
+					}
+					await credentials.unset(resolved);
+					return {
+						kind: "success",
+						text: `${resolved} cleared`
+					};
+				}
+				const flow = flowForRoute(targets, arg.toLowerCase());
+				if (flow !== void 0) {
+					await credentials.deleteRecord(flow.key);
+					return {
+						kind: "success",
+						text: `${flow.label} signed out locally — stored credential cleared`
+					};
+				}
+				return {
 					kind: "error",
-					text: `unknown credential target "${arg}" — ${options.map((option) => `${option.label} (${option.ref})`).join(", ")}`
+					text: `unknown credential target "${arg}" — ${mergedTargetsSummary(mergeLoginTargets(options, targets))}`
 				};
-				await credentials.unset(resolved);
+			}
+			const rows = await logoutPickerRows(credentials, options, targets);
+			if (rows.length === 0) return {
+				kind: "error",
+				text: "nothing to sign out"
+			};
+			const picked = await new Promise((resolve) => {
+				app.openPicker(rows, (value) => resolve(value), () => resolve(void 0), {
+					enableSearch: true,
+					header: "logout · credentials",
+					noMatchText: "  nothing to sign out",
+					width: 76,
+					maxHeight: 26,
+					showHint: true
+				});
+			});
+			if (picked === void 0) return {
+				kind: "error",
+				text: "logout cancelled"
+			};
+			if (picked.startsWith(LOGOUT_RECORD_VALUE)) {
+				await credentials.deleteRecord(picked.slice(8));
 				return {
 					kind: "success",
-					text: `${resolved} cleared`
+					text: `${picked.slice(8)} signed out locally — stored credential cleared`
 				};
 			}
-			await credentials.unset(options[0].ref);
+			const targetRef = picked.slice(5);
+			await credentials.unset(targetRef);
 			return {
 				kind: "success",
-				text: `${options[0].ref} cleared`
+				text: `${targetRef} cleared`
 			};
 		}
 	});
@@ -27483,6 +27924,33 @@ function appendHistoryLine(file, text, lastContent) {
 	return true;
 }
 //#endregion
+//#region src/dsh-version.ts
+/**
+* The installed dsh (DeepSeek Harness CLI) version, resolved from the
+* launcher's real path: `process.argv[1]` is the `dsh` bin, whose realpath
+* walks up to the `@deepseek-ai/dsh/package.json` that owns it. The header
+* and the welcome card show the harness the TUI runs on, not this bundle's
+* own patch level. Undefined when the launcher path is unreadable.
+* @module @xmoon76/dsh-pi-tui/dsh-version
+*/
+/** @returns the installed dsh version string, or undefined. */
+function dshVersion() {
+	const bin = process.argv[1];
+	if (bin === void 0) return void 0;
+	try {
+		let dir = dirname(realpathSync(bin));
+		for (let depth = 0; depth < 8; depth += 1) {
+			try {
+				const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+				if (pkg.name === "@deepseek-ai/dsh" && typeof pkg.version === "string") return pkg.version;
+			} catch {}
+			const parent = dirname(dir);
+			if (parent === dir) return void 0;
+			dir = parent;
+		}
+	} catch {}
+}
+//#endregion
 //#region src/exit.ts
 /**
 * The TUI exit contract: flush the live session with a HARD timeout, record
@@ -28741,6 +29209,19 @@ const inject = [
 	TUI_STARTUP_SERVICE
 ];
 const Config = z.object({ sessionId: z.string() });
+/**
+* Wire the credential surface refresh to the dsh 0.1.1-rc.1 credential
+* events. The rc.1 release split the credential update event into the
+* reference half and the durable-record half; both change what the footer
+* model row and the welcome card show (a /login /logout, an external
+* .credentials.yaml edit, or an authorization flow committing a record), so
+* they share one best-effort callback. The callback must not read secrets
+* or mutate providers — it only re-reads describe-level state.
+*/
+function registerCredentialSurfaceRefresh(ctx, refresh) {
+	ctx.on("credentials/reference-updated", refresh);
+	ctx.on("credentials/record-updated", refresh);
+}
 /** Display window in turns; older turns collapse into a summary entry. */
 const WINDOW_TURNS = 15;
 /** Coalesced repaint interval for streaming events, in ms. */
@@ -29034,33 +29515,10 @@ function foldQueueRows(messages, mode, notified) {
 	};
 }
 /**
-* The installed dsh version (e.g. `0.1.0-rc.6`), resolved from the launcher's
-* real path: `process.argv[1]` is the `dsh` bin, whose realpath walks up to
-* the `@deepseek-ai/dsh/package.json` that owns it. The version the welcome
-* card shows is the harness the TUI runs on, not this bundle's own patch
-* level. Undefined when the launcher path is unreadable.
-* @returns the installed dsh version string, or undefined.
-*/
-function dshVersion() {
-	const bin = process.argv[1];
-	if (bin === void 0) return void 0;
-	try {
-		let dir = dirname(realpathSync(bin));
-		for (let depth = 0; depth < 8; depth += 1) {
-			try {
-				const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
-				if (pkg.name === "@deepseek-ai/dsh" && typeof pkg.version === "string") return pkg.version;
-			} catch {}
-			const parent = dirname(dir);
-			if (parent === dir) return void 0;
-			dir = parent;
-		}
-	} catch {}
-}
-/**
 * The bundle's own version, read from package.json at runtime so the welcome
 * card never drifts from the shipped version. The DISPLAYED version prefers
-* the installed dsh version (`dshVersion`), falling back to this one.
+* the installed dsh version (`dshVersion` — shared with the header badge
+* via src/dsh-version.ts), falling back to this one.
 * @returns the version string, or a fallback when the file is unreadable.
 */
 function packageVersion() {
@@ -31313,10 +31771,11 @@ function apply(ctx, config) {
 				updateWelcomeCard();
 			}
 		});
-		ctx.on("credentials/updated", () => {
+		const refreshCredentialSurface = () => {
 			refreshStatus();
 			updateWelcomeCard();
-		});
+		};
+		registerCredentialSurfaceRefresh(ctx, refreshCredentialSurface);
 		if (liveAgent !== void 0) {
 			app.setPlanMode(foldPlanMode(liveAgent.session.events));
 			app.setWorking(workingFromLog(liveAgent.session.events));
@@ -31384,4 +31843,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { apply$1 as A, runningProfile as C, subagentJobViewHint as D, subagentJobTranscriptId as E, describeKey as F, name$1 as M, PI_TUI_EXTENSIONS_SERVICE as N, subagentNoticeIsFailure as O, API_VERSION as P, resumeCommand as S, shouldSteerOnEnter as T, matchPendingSubagentCall as _, SessionLockRefusedError as a, recordedPreset as b, compactingFromLog as c, foldCompactionEvent as d, foldQueueRows as f, isUserQueueInput as g, isSubagentSettlementNotice as h, SESSIONLESS_COMMANDS as i, inject$1 as j, forkSeed as k, composeAgent as l, isPlainExitPrompt as m, HOST_COMMAND_CATALOG as n, apply as o, inject as p, LOCAL_COMMANDS as r, busyAfterTurnBoundary as s, Config as t, dangerCommand as u, name as v, shouldConsumeAdvertisedMiss as w, resolveInitialCatalog as x, recomposeBlank as y };
+export { dshVersion as A, resumeCommand as C, subagentJobTranscriptId as D, shouldSteerOnEnter as E, PI_TUI_EXTENSIONS_SERVICE as F, API_VERSION as I, describeKey as L, apply$1 as M, inject$1 as N, subagentJobViewHint as O, name$1 as P, resolveInitialCatalog as S, shouldConsumeAdvertisedMiss as T, matchPendingSubagentCall as _, SessionLockRefusedError as a, recordedPreset as b, compactingFromLog as c, foldCompactionEvent as d, foldQueueRows as f, isUserQueueInput as g, isSubagentSettlementNotice as h, SESSIONLESS_COMMANDS as i, forkSeed as j, subagentNoticeIsFailure as k, composeAgent as l, isPlainExitPrompt as m, HOST_COMMAND_CATALOG as n, apply as o, inject as p, LOCAL_COMMANDS as r, busyAfterTurnBoundary as s, Config as t, dangerCommand as u, name as v, runningProfile as w, registerCredentialSurfaceRefresh as x, recomposeBlank as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmoon76/dsh-pi-tui",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "The dsh-pi-tui bundle: a TUI surface for DeepSeek Harness profiles (dsh --profile pi-tui)",
   "license": "MIT",
   "author": "XMoon <xmoonox@gmail.com>",
@@ -77,72 +77,74 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-cmdline": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-shell": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-authorization": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-cmdline": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-goal": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-jobs": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-shell": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-subagent": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-tool-workflow": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-user-approval": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-user-questions": "^0.1.1-rc.1",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
-    "@xmoon76/pi-tui": "^0.84.3",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-agent-loop": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-authorization": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-brand": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-goal": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-jobs": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-scope": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-shell": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-subagent": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-timeout": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-tool-workflow": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-user-approval": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-user-questions": "^0.1.1-rc.1",
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@xterm/headless": "5.5.0",
     "@types/node": "^22.0.0",
-    "typescript": "^5.9.0",
+    "@xmoon76/pi-tui": "^0.84.3",
+    "@xterm/headless": "5.5.0",
     "tsdown": "0.22.0",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-shell": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-loop": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-scope": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-brand": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-timeout": "^0.1.0-rc.8",
-    "tsx": "^4.23.12"
+    "tsx": "^4.23.12",
+    "typescript": "^5.9.0"
   },
   "engines": {
     "node": "^22.19.0 || >=24"